Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lLd38xua8No1LTCPTOOhHiGHcCU.roa
File: lLd38xua8No1LTCPTOOhHiGHcCU.roa (raw, json)
Hash identifier: O4c1U3i2vE5K62DYx0tErHiDLMc9maA4b6NrE6cPdmo=
Subject key identifier: 94:B7:77:F3:1B:9A:F0:DA:35:2D:30:8F:4C:E3:A1:1E:21:87:70:25
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01849ABAAEACA1C8EB6E337BC29EDA905F97
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lLd38xua8No1LTCPTOOhHiGHcCU.roa
Signing time: Mon 21 Nov 2022 15:07:16 +0000
ROA not before: Mon 21 Nov 2022 15:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211715
IP address blocks: 193.105.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:ba:ae:ac:a1:c8:eb:6e:33:7b:c2:9e:da:90:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 21 15:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94b777f31b9af0da352d308f4ce3a11e21877025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:97:bb:df:b1:4f:9b:90:c1:51:79:7b:31:
88:0c:fe:4e:8c:f9:ab:bb:cd:32:b0:de:75:33:6a:
ad:ca:4f:91:27:f4:6d:54:08:20:06:86:06:c2:96:
63:b0:98:d6:ec:af:a5:4c:b4:42:1d:af:e7:5f:97:
92:da:ac:22:8f:68:56:8e:e0:25:4f:57:39:8b:0a:
17:bc:e2:3f:cf:4b:cc:99:db:cc:b9:17:8b:94:8b:
88:cf:a1:56:a8:2a:7a:9b:07:19:e6:51:a3:d9:b8:
e4:70:87:87:58:e8:f3:6e:e4:e5:9f:58:4c:66:ff:
43:b4:1b:be:9f:a3:6f:b9:72:e4:67:6f:7c:ae:bc:
05:1b:3c:fb:78:dc:34:3c:fa:34:83:91:f0:69:33:
4f:74:04:34:04:87:41:83:c2:1d:be:8f:ec:f9:41:
b2:93:d7:ae:27:63:fd:e7:af:3c:3e:de:12:ad:3f:
08:c9:79:06:89:fa:40:61:01:2e:11:a9:a1:3b:1e:
b1:ac:c1:63:7a:f8:07:49:ed:b0:11:0f:c5:b7:34:
af:b5:18:e3:21:ed:57:da:fe:71:c6:f5:16:6e:9e:
5c:79:c8:d2:4c:23:2b:1d:fe:a2:9d:9b:f2:8d:95:
52:85:a5:e1:38:59:70:8b:5c:61:b4:e8:53:b9:1a:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B7:77:F3:1B:9A:F0:DA:35:2D:30:8F:4C:E3:A1:1E:21:87:70:25
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lLd38xua8No1LTCPTOOhHiGHcCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8d:df:ed:d1:05:a9:a4:2e:2a:f3:eb:e1:ec:c4:31:cc:d5:
4a:58:c1:37:b8:94:b4:bf:73:88:1c:8c:c5:8d:55:00:df:a9:
54:be:e7:9d:b2:20:69:9b:8f:73:58:c1:52:1a:fe:04:3d:88:
28:f9:77:f8:e6:ac:7d:71:6f:5c:58:2b:25:7a:1e:63:87:16:
57:97:c6:ea:59:31:09:b6:01:ee:f9:17:91:19:ab:6e:d0:74:
b1:98:d7:a6:f8:d9:ef:17:45:22:d9:26:d7:4c:3b:93:b5:a0:
5f:d4:09:81:31:e9:29:6c:ab:7a:c1:af:5b:e2:b4:c4:14:57:
0d:65:c0:9f:43:07:11:47:65:f9:0b:6e:b1:69:79:c6:be:3a:
2f:66:5f:8b:a6:de:e5:af:fc:b4:51:37:1e:0e:62:3c:f2:00:
0f:f2:2e:d5:6a:0e:23:f6:75:fd:aa:6c:47:f4:1b:ec:3b:f6:
6a:cb:bf:06:12:35:73:c5:d8:d3:15:16:7c:e1:29:ed:1a:47:
f4:8a:e2:55:43:02:e1:53:65:fa:4a:8f:3b:ca:20:03:b1:d3:
d3:4b:87:ef:01:dc:c6:bf:d8:b5:d6:8c:2a:64:7b:b0:c2:3f:
4f:eb:c7:0f:1a:9f:50:f8:0f:1a:bd:69:47:98:4f:9d:c6:7f:
30:c5:ef:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSauq6socjrbjN7wp7akF+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMTIxMTUwNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGI3NzdmMzFiOWFmMGRhMzUyZDMwOGY0Y2UzYTExZTIxODc3MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGXu9+xT5uQwVF5ezGIDP5OjPmr
u80ysN51M2qtyk+RJ/RtVAggBoYGwpZjsJjW7K+lTLRCHa/nX5eS2qwij2hWjuAl
T1c5iwoXvOI/z0vMmdvMuReLlIuIz6FWqCp6mwcZ5lGj2bjkcIeHWOjzbuTln1hM
Zv9DtBu+n6NvuXLkZ298rrwFGzz7eNw0PPo0g5HwaTNPdAQ0BIdBg8Idvo/s+UGy
k9euJ2P95688Pt4SrT8IyXkGifpAYQEuEamhOx6xrMFjevgHSe2wEQ/FtzSvtRjj
Ie1X2v5xxvUWbp5cecjSTCMrHf6inZvyjZVShaXhOFlwi1xhtOhTuRp3TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJS3d/MbmvDaNS0wj0zjoR4hh3AlMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvbExkMzh4dWE4Tm8xTFRDUFRPT2hIaUdIY0NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnPMA0G
CSqGSIb3DQEBCwUAA4IBAQAujd/t0QWppC4q8+vh7MQxzNVKWME3uJS0v3OIHIzF
jVUA36lUvuedsiBpm49zWMFSGv4EPYgo+Xf45qx9cW9cWCsleh5jhxZXl8bqWTEJ
tgHu+ReRGatu0HSxmNem+NnvF0Ui2SbXTDuTtaBf1AmBMekpbKt6wa9b4rTEFFcN
ZcCfQwcRR2X5C26xaXnGvjovZl+Lpt7lr/y0UTceDmI88gAP8i7Vag4j9nX9qmxH
9BvsO/Zqy78GEjVzxdjTFRZ84SntGkf0iuJVQwLhU2X6So87yiADsdPTS4fvAdzG
v9i11owqZHuwwj9P68cPGp9Q+A8avWlHmE+dxn8wxe9i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org